Control: GCP > IAM > CMDB

Record and synchronize details for the GCP IAM into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

Note: If CMDB is set to Skip for a resource, then it will not be added to the CMDB, and no controls that target it will run.

Resource Types

This control targets the following resource types:

GCP > IAM

Primary Policies

The following policies can be used to configure this control:

CMDB

In Your Workspace

Controls by Resource report
Controls by Control Type report

Developers

Control Type URI

tmod:@turbot/gcp-iam#/control/types/iamCmdb

Category URI

tmod:@turbot/turbot#/control/categories/cmdb

GraphQL

query controlType(id: "tmod:@turbot/gcp-iam#/control/types/iamCmdb") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/gcp-iam#/control/types/iamCmdb'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/gcp-iam#/control/types/iamCmdb"